Wildcard DNS SAN Vulnerability in wolfSSL by wolfSSL
CVE-2026-10592

6.3MEDIUM

Key Information:

Vendor

Wolfssl

Status
Wolfssl
Vendor
CVE Published:
25 June 2026

What is CVE-2026-10592?

A security flaw in wolfSSL allows certificates containing wildcard DNS Subject Alternative Names (SANs) to bypass the Certificate Authority's (CA) name-constraints. This could lead to the acceptance of certificates that should be rejected, posing significant security risks for applications relying on robust certificate validation. This vulnerability highlights the importance of strict adherence to CA policies and the need for timely updates to security protocols.

Affected Version(s)

wolfSSL 3.9.10 <= 5.9.1

References

https://github.com/wolfSSL/wolfssl/pull/10549
patch
https://www.wolfssl.com/docs/security-vulnerabilities/

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

tonghuaroot
.